Hackers are leveraging artificial intelligence to launch more sophisticated cyberattacks, including automating vulnerability discovery, phishing campaigns, and malware creation, according to multiple industry sources [1, 2, 3].

The Google Threat Intelligence Group revealed on May 12 that hackers deployed an AI-developed zero-day exploit designed to bypass two-factor authentication, marking a significant escalation in cyber threat capabilities [2]. On May 13, Lee Klarich, Palo Alto Networks’ chief technology officer, warned that organizations have a narrow three-to-five-month window to improve cybersecurity defenses before AI-driven exploits become widespread. "We now estimate a narrow three-to-five-month window for organizations to outpace the adversary before AI-driven exploits start to become the new norm. This impending vulnerability deluge demands urgency," Klarich said [3].

AI models such as Anthropic’s Mythos and OpenAI’s GPT-5.5-Cyber are fueling the faster discovery of software vulnerabilities. Anthropic limited its Mythos model rollout last month to select companies, including Palo Alto Networks and CrowdStrike, allowing testing and prevention of misuse [3]. OpenAI announced its GPT-5.5-Cyber model and Daybreak cyber initiative shortly before Klarich’s warning [3]. Klarich added that the AI models are "likely even better at finding vulnerabilities than we initially realized," addressing initial skepticism about AI’s capability [3].

Google recently intervened to stop a mass AI-powered exploitation attempt, but hackers continue to use publicly available AI tools to exploit software flaws [3]. In response, cybersecurity companies CrowdStrike and Palo Alto Networks have developed AI-driven autonomous threat detection and response technologies, adapting to the evolving threat landscape [2].

These adaptations have coincided with notable stock gains. Over the past month, CrowdStrike’s shares rose 44%, nearing its record high price from November 2025, while Palo Alto Networks gained 38%, approaching its October 2025 peak. Both companies have recorded approximately 16% year-to-date gains, outperforming the S&P 500’s 7.5% rise [2].

Security teams face intense pressure to bolster defenses as AI-augmented attacks become more frequent. The coming months will test how effectively organizations can respond before these AI-driven exploits become routine threats.